Description
Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | mongrel | >= 1.0.4, < 1.0.5 | 1.0.5 | GHSA-m7r6-43v2-49vf |
| RubyGems | mongrel | >= 1.1.0, < 1.1.3 | 1.1.3 | GHSA-m7r6-43v2-49vf |
References
- [Mongrel] 20071228 Arbitrary system files readable in 1.0.4 - 1.1.2 mailing-list
- http://mongrel.rubyforge.org/news.html
- 27133 vdb-entry
- 28323 third-party-advisory
- 39866 vdb-entry
- TA08-150A third-party-advisory
- [Mongrel] 20071229 Regarding the 1.1.3 security release mailing-list
- 30430 third-party-advisory
- APPLE-SA-2008-05-28 vendor-advisory
- ADV-2008-1697 vdb-entry
- [Mongrel] [SECURITY] Must Fix This Now! (Re: Arbitrary system files readable in 1.0.4 - 1.1.2) mailing-list
- [Mongrel] 20071228 Arbitrary system files readable in 1.0.4 - 1.1.2 mailing-list